Risk Services, Cybersecurity Senior Associate / Assistant Manager - Offensive Security (Security Testing Delivery)

PwC; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

PwC is seeking an experienced offensive security leader in Singapore to drive end-to-end security testing engagements (VAPT, HCR, SCR, etc.) across networks, apps, APIs, mobile, and cloud. You will manage scopes, timelines, and quality while coordinating with threat intel and internal teams to deliver actionable remediation guidance.

You will also contribute to business development, develop project plans, and present to technical and executive audiences.

Qualifications

• Bachelor's degree in Computer Engineering/Science or Information Security.
• Minimum 3–5 years in offensive security / security testing.
• Experience managing multiple security testing projects with tight deadlines.
• Hands-on end-to-end engagement delivery (scoping, execution, reporting, closure).
• Experience with effort estimation, scoping, and pricing of security engagements.
• CREST CRT certification is required at minimum.

Responsibilities

• Lead end-to-end Security Testing engagements from scoping to closure.
• Manage multiple projects with SLAs, timelines, and quality benchmarks.
• Develop plans, trackers, and dashboards for active engagements.
• Coordinate with consultants, QA reviewers, threat intel teams.
• Conduct kick-off calls, weekly reviews, and client debriefs.
• Identify risks, escalate, and drive timely resolution.
• Ensure reports and remediation guidance meet quality standards.
• Improve testing delivery processes and templates.

Skills

Targeted pentests

Wireless/Web/Network testing

Red Team infrastructure

Scripting (Python/PowerShell)

Networking protocols

OS platforms (Unix/Linux/Windows)

Cloud security assessments

Compliance-driven VAPT (PCI-DSS/NIST/S

Education

Bachelor's degree in Computer Engineering/Science or Information Security

Job description

At PwC, we help clients build trust and reinvent so they can turn complexity into competitive advantage. We’re a tech-forward, people-empowered network with more than 370,000 people in 149 countries. Across audit and assurance, tax and legal, deals and consulting we help clients build, accelerate and sustain momentum. Find out more at www.pwc.com.

We are looking for an experienced offensive security professional to take on a leadership role in delivering end-to-endSecurity Testingengagements(VAPT,HCRandSCRetc.)while contributing to business development efforts.The ideal candidate combines strong technical expertise in security assessments with proven project management capabilities and a commercial mindset.This role sits within our Risk and Security Controls practice, where the team helps organizations analyze and strengthen the security posture of their information technology systems and environments.

Key Responsibilities

A. End-to-EndSecurity TestingProject Management & Delivery

• Own and manageSecurity Testingengagements end-to-endfrom scoping, scheduling, resource allocation, execution, quality review, reporting, and closure within strict, time-sensitive deadlines.

• Manage multiple concurrent projects simultaneously, ensuring adherence to SLAs, timelines, and quality benchmarks.

• Develop andmaintainproject plans, trackers, and status dashboardsfor all active engagements.

• Coordinate with internal teams(consultants, QA reviewers, threat intelligence) to ensuretimelydelivery and consistent output quality.

• Conduct kick-off calls, weekly status reviews, and post-engagement debriefswith clients.

• Proactivelyidentifyproject risks and delays, escalating where needed, and drive resolution to keep engagements on track.

• Ensure all deliverables(reports, presentations, remediation guidance) undergo quality review before client submission.

• Define and continuously improveSecurity Testingdelivery processes, templates, checklists, and methodologies for operational efficiency.

B. Technical Delivery & Consultancy

• Conduct vulnerability assessments and penetration testing (VAPT) across networks, web applications, mobile applications, APIs, cloud environments, and infrastructure.

• Perform source code reviews whenrequired.

• Collaborate with clients and the threat intelligence team to define assessmentobjectives, goals, scope, and scenarios.

• Simulate cyber-targeted attacks using adversary techniques, tactics, and procedures (TTPs) on client environments where red team engagements arerequired.

• Prepare detailed reports onidentifiedsecurity vulnerabilities, attack paths, and actionable remediation recommendations.

• Develop comprehensive andaccuratereports and presentations forbothtechnical and executive audiences.

• Stay up to date on the latest cybersecurity threats, attack techniques, and industry trends.

• Interface with clients to address concerns, issues, or escalations; track and drive to closure any issues that impact service delivery and client satisfaction.

Requirements & QualificationsEducation

• Bachelor's degree in ComputerEngineering/Science, Information Security, or a related technical discipline (or equivalent work experience).

Experience

• Minimum3 - 5 yearsof relevant experience in offensive security /Security Testing, preferably in aconsulting or professional services environment.

• Proventrack recordof managing multipleSecurity Testingprojects simultaneouslywith tight, time-sensitive deadlines.

• Hands-on experience inend-to-end engagement delivery-scoping, execution, reporting, and closure.

• Experience witheffort estimation, scoping, and pricingof security assessment engagements.

Certifications(Required-must have at minimum)

• CREST CRT

Certifications (Preferred / Nice-to-Have)

• OSCP (Offensive Security Certified Professional)

• CREST CCT

• GPEN, GWAPT, or equivalent

• OSWE, OSED, CRTO, CRTP

• PMP / PRINCE2 or equivalent project management certification

• CEH (as a baseline)

Technical Skills & Experience

Experience inat least fourof the following:

• Performing targeted penetration tests including vulnerability identification, exploitation, and post-exploitation across networks, web apps, APIs, mobile, and cloud.

• Strong credentials inwireless, web application, and network security testing.

• Setting up andoperatingred team / penetration testing infrastructure.

• Shell scripting or automation of tasks usingPython, Perl, Bash, Ruby, or PowerShell.

• Thorough understanding ofnetwork protocols, data on the wire, and covert channels.

• Strong understanding ofUnix/Linux/Mac/Windows operating systems.

• Familiarity withcloud security assessments(AWS, Azure, GCP).

• Experience withcompliance-driven VAPTaligned to frameworks such as PCI-DSS, ISO 27001, NIST, SOC 2, HIPAA, etc.

Soft Skills & Competencies

• Excellent stakeholder managementand client-facing communication skills.

• Ability to document and explain technical details inaconcise, understandable mannerto both technical and non-technical audiences.

• Strongorganizational and multitaskingabilities-comfortable managing competing priorities under pressure.

• Commercial awareness and aresults-driven mindsetfor BD contributions.

• Proficiencywithproject management.

• Leadership qualities-ability tomotivate teams and drive accountability.

As the teamexperiencehigh volume of applications, we regret toinformthat only shortlisted candidates will be notified.